Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier: SctYR0rnXfj510DSDJwLsmR27Bv3rI//L921LyfwCWM=
Subject key identifier: B3:6B:8C:BE:EB:4B:4E:EB:4C:E2:0C:B2:01:66:4F:42:81:BC:72:E2
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial: 019D382DDA9497B86BC424075C118C95B2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number: 14AC
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: zRvSsL9uVhmGSYjD2OA9suXiZJajy5WwwOZVIXfDqIg=)
2: VYFRuXlvwBdryFQTt5OTENfApaY.roa (hash: rnOyzeUtaX8vu4gXdx5Hk1vLfU4MWIMFx4e4U3jLOpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:da:94:97:b8:6b:c4:24:07:5c:11:8c:95:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=b36b8cbeeb4b4eeb4ce20cb201664f4281bc72e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:da:e2:b8:78:41:9f:43:f3:7c:ce:1e:83:3c:
af:bd:da:03:0c:8b:ba:7c:2f:40:a9:f7:60:5a:8c:
0f:6b:46:31:8c:b0:99:7d:3c:3f:95:5b:d2:c1:b9:
b6:c7:58:ed:b5:cf:05:fe:66:8b:c9:5b:1e:28:39:
4e:df:f3:5c:c1:84:eb:da:f9:15:3c:cd:78:a7:1b:
d1:cb:5f:0d:45:24:fa:88:b7:80:d1:19:15:9a:1a:
f6:d7:5b:46:59:f6:c2:d8:0c:9f:77:aa:9f:e0:4d:
e3:92:23:c5:46:66:52:03:95:24:be:02:77:f5:fe:
ad:10:3e:c5:ee:75:c8:04:18:b2:1b:5e:49:1c:39:
e9:9c:66:d6:10:00:21:19:2b:51:74:42:da:db:87:
49:a1:fd:e5:bb:9f:ea:7c:38:3b:ce:41:8b:2f:af:
29:ab:60:d9:62:39:3d:46:ba:80:13:3d:dd:ef:31:
b1:f7:d1:cf:c9:c0:64:d4:76:cd:11:c0:a5:b8:3d:
13:9d:68:d1:fb:ec:d9:a4:d1:04:30:12:8b:0b:bf:
ea:82:7c:64:08:91:b0:8f:58:5f:ba:4a:38:c8:5e:
90:27:22:d5:51:88:f0:a8:01:5e:3e:21:a5:fd:a0:
88:06:69:33:ec:9e:fa:8e:04:d5:5d:ab:07:63:1a:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:8C:BE:EB:4B:4E:EB:4C:E2:0C:B2:01:66:4F:42:81:BC:72:E2
X509v3 Authority Key Identifier:
keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7d:7a:c8:0a:d6:44:1a:3b:e0:87:7b:d1:f5:88:16:54:01:
98:75:71:5c:cc:9f:2c:b1:8c:6c:ab:fe:94:df:fd:98:a1:5f:
d8:b6:d6:a9:f3:aa:bf:6b:45:26:34:33:af:9e:1f:4d:ca:a5:
79:06:5e:1a:cc:9b:f7:d1:f5:26:e7:8f:42:21:47:dd:de:ba:
93:66:ee:4b:ec:f8:74:f9:9b:ae:09:92:46:04:83:cb:0b:23:
8b:70:f4:6a:9b:01:82:25:7b:3b:83:52:82:88:bd:c3:2b:50:
97:c1:b7:fd:6a:5b:a4:e8:50:11:40:8b:b9:c5:70:2d:f4:d9:
24:72:2e:81:87:55:1f:a5:62:35:7f:da:d4:c4:f4:54:87:27:
ce:45:06:c6:df:e6:6d:95:3a:62:9f:3e:d5:6c:76:26:0f:23:
a9:5b:0e:ff:c4:47:37:40:22:a9:c4:2e:87:67:dc:d2:42:a7:
b7:d5:00:3f:0b:a5:00:57:be:59:34:c6:59:15:97:72:cf:82:
a2:28:8a:4e:99:d6:e9:e3:7c:5d:ab:a5:fc:9d:8d:e7:41:d8:
4f:f5:95:16:67:e6:1e:59:8d:16:8a:0f:e5:6d:89:b9:2a:7d:
23:7f:af:07:87:a5:1f:4c:e7:0a:f4:7b:7f:a9:9c:ef:ab:b5:
d3:ac:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:45 2026 by rpki-client